[sudo-users] sudoers exception failure with root

[Russell Van Tassell]

On Wed, Aug 31, 2005 at 12:53:23PM -0600, Mike wrote:
> I need some help understanding why sudo isn't allowing me to prevent 
> users from logging on as root. I looked in the  posts archives and 
> didn't see anything so I'm sorry if this is a recursive post. I followed 
> the example in the sudoers manual and yet I'm still allowed to login as 
> root. Here is a few lines of the sudoers file that should have the 
> proper syntax, any help would be appreciated:

When you say "login," I'm assuming you really mean "su" here, correct?
There are mechanisms other than sudo to help with the login process
issue, itself.  So, assuming you're attempting to prevent them simply
from doing a "sudo su root," do we assume that they're allowed to su
to any other user, then?

Often when debugging these issues, it's helpful to try a "sudo -l" on
the host in-question... it should give you a better idea of how the
sudoer's file is actually getting parsed.

Apologies, as I'm rather sleep-deprived this week...


-- 
Russell M. Van Tassell
russell at loosenut.com

"This page is not for you. Please kneel under your desk, hold on to
 your metal cube and put your finger in the socket."